Static task
static1
Behavioral task
behavioral1
Sample
11189a32ec4094624e4a6b9039ea5319.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11189a32ec4094624e4a6b9039ea5319.exe
Resource
win10v2004-20231215-en
General
-
Target
11189a32ec4094624e4a6b9039ea5319
-
Size
2.7MB
-
MD5
11189a32ec4094624e4a6b9039ea5319
-
SHA1
4fdfb77375f2e87d6ba244ff36499f6d14cc0f16
-
SHA256
4ed549db1d87af4e6c2fa93ccd3f343f0811a7bfdebe2a8d11e55b48db5d5c92
-
SHA512
9373b184483bb2766e7afd60f18d864cdb4dd88aedb14810e6b0f22e122371157a4b77b904311f66b1d0f884676823331ae25aa5c7740de0e9aff809a8d85fe9
-
SSDEEP
12288:/jcxeMzYtcFERJmrbWeAynyfumsb/fPDZx:LcxeMz/GJmWeAyncu1b/ftx
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11189a32ec4094624e4a6b9039ea5319
Files
-
11189a32ec4094624e4a6b9039ea5319.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ